Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens.
CVE-2026-22072 has a risk score of 65, indicating a medium severity vulnerability.
To mitigate CVE-2026-22072, ensure proper input validation is implemented in WebView components and restrict loading of arbitrary external URLs.
CVE-2026-22072 can enable attacks that inject malicious JavaScript code into WebView, potentially leading to user token leakage.
Any applications utilizing WebView components that allow loading of external URLs without proper validation are potentially affected by CVE-2026-22072.
Developers must be aware that failing to validate URLs in WebView can lead to security breaches, including exposure of sensitive user tokens.